[
https://issues.apache.org/jira/browse/MNG-7068?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Guillaume Nodet updated MNG-7068:
---------------------------------
Fix Version/s: 4.0.0-alpha-2
> Active dependency management for Google Guice/Guava
> ---------------------------------------------------
>
> Key: MNG-7068
> URL: https://issues.apache.org/jira/browse/MNG-7068
> Project: Maven
> Issue Type: Improvement
> Components: Dependencies
> Affects Versions: 3.6.3
> Reporter: Boris Unckel
> Assignee: Michael Osipov
> Priority: Major
> Fix For: 3.9.0, 4.0.0-alpha-1, 4.0.0-alpha-2, 4.0.0
>
>
> The current pom includes com.google.inject:guice with the default transitive
> dependency of com.google.guava:guava. Guava has declared several
> dependencies, which are not needed at runtime. Only
> com.google.guava:failureaccess is needed.
> The proposal is first to add com.google.guava:guava to the excludes of guice.
> Second guava and failureaccess shall be added as direct dependencies.
> This has two advantages: Downstream projects only get the needed dependencies
> and the version of guava can be independently set.
> The runtime dependencies for Guava are explained in the last section of the
> [README|https://github.com/google/guava/tree/v30.1] "Important Warnings" #3
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
